I followed your suggestion, but I still have the problem. I put DEFAULT Auth-Type := Reject at the bottom of users file. I have a mysql database containing users, not file: this could be a problem? Arrigo -----Messaggio originale----- Da: freeradius-users-bounces+a.savio=bascom.it@lists.freeradius.org [mailto:freeradius-users-bounces+a.savio=bascom.it@lists.freeradius.org] Per conto di tnt@kalik.net Inviato: mercoledì 7 gennaio 2009 12.24 A: FreeRadius users mailing list Oggetto: Re: R: NAS-Identifier and radgroupcheck table
MMM... Not so easy...
I made other tests, but I had a wrong profile on user table. I corrected the profile and I still have my problem. At the moment I can classify users belonging to a group, and all is OK. The problem is for users that don't belong to any group. They are still authenticated (I read that this is the expected behaviour). I'd like to send by default an Access-Reject reply to everybody, sending the Access-Accept only to "grouped" one.
Put DEFAULT Auth-Type := Reject in users file. Add Auth-Type Accept with := as op in radgroupcheck for each group. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html